Better Pages default permissions

This commit is contained in:
Djamil Legato
2021-04-22 11:57:40 -07:00
parent c9be7941e9
commit 438c9716cc
2 changed files with 14 additions and 13 deletions

View File

@@ -8,6 +8,7 @@
* Support native spell checkers in CodeMirror editor [#1266](https://github.com/getgrav/grav-plugin-admin/issues/1266)
* Added new 'Content Highlight' color to presets
* Copying Pages now prompts a dedicated modal that allows for picking title, folder name, parent location, page template and visibility [#1738](https://github.com/getgrav/grav-plugin-admin/issues/1738)
* Better Pages default permissions
1. [](#bugfix)
* Moved preset CSS compile to earlier in the process to ensure compilation happens in time.
* Prevent Save actions from Flex Objects to trigger the unsaved unload notice [#2125](https://github.com/getgrav/grav-plugin-admin/issues/2125)

View File

@@ -1271,7 +1271,7 @@ class AdminController extends AdminBaseController
return false;
}
if (!$this->authorizeTask('new folder', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('new folder', ['admin.pages', 'admin.pages.create', 'admin.super'])) {
return false;
}
@@ -1465,7 +1465,7 @@ class AdminController extends AdminBaseController
return false;
}
if (!$this->authorizeTask('copy page', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('copy page', ['admin.pages', 'admin.pages.create', 'admin.super'])) {
return false;
}
@@ -1554,7 +1554,7 @@ class AdminController extends AdminBaseController
return false;
}
if (!$this->authorizeTask('reorder pages', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('reorder pages', ['admin.pages', 'admin.pages.update', 'admin.super'])) {
return false;
}
@@ -1579,7 +1579,7 @@ class AdminController extends AdminBaseController
return false;
}
if (!$this->authorizeTask('delete page', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('delete page', ['admin.pages', 'admin.pages.delete', 'admin.super'])) {
return false;
}
@@ -1625,7 +1625,7 @@ class AdminController extends AdminBaseController
return false;
}
if (!$this->authorizeTask('switch language', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('switch language', ['admin.pages', 'admin.pages.list', 'admin.super'])) {
return false;
}
@@ -1666,7 +1666,7 @@ class AdminController extends AdminBaseController
return false;
}
if (!$this->authorizeTask('save as', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('save as', ['admin.pages', 'admin.pages.create', 'admin.super'])) {
return false;
}
@@ -1831,7 +1831,7 @@ class AdminController extends AdminBaseController
return false;
}
if (!$this->authorizeTask('get childtypes', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('get childtypes', ['admin.pages', 'admin.pages.list', 'admin.super'])) {
$this->admin->json_response = [
'status' => 'error',
'message' => $this->admin::translate('PLUGIN_ADMIN.INSUFFICIENT_PERMISSIONS_FOR_TASK')
@@ -1885,7 +1885,7 @@ class AdminController extends AdminBaseController
return false;
}
if (!$this->authorizeTask('filter pages', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('filter pages', ['admin.pages', 'admin.pages.list', 'admin.super'])) {
$this->admin->json_response = [
'status' => 'error',
'message' => $this->admin::translate('PLUGIN_ADMIN.INSUFFICIENT_PERMISSIONS_FOR_TASK')
@@ -2020,7 +2020,7 @@ class AdminController extends AdminBaseController
*/
protected function taskProcessMarkdown()
{
if (!$this->authorizeTask('process markdown', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('process markdown', ['admin.pages', 'admin.pages.read', 'admin.super'])) {
$this->admin->json_response = [
'status' => 'error',
'message' => $this->admin::translate('PLUGIN_ADMIN.INSUFFICIENT_PERMISSIONS_FOR_TASK')
@@ -2080,7 +2080,7 @@ class AdminController extends AdminBaseController
return false;
}
if (!$this->authorizeTask('list media', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('list media', ['admin.pages', 'admin.pages.read', 'admin.super'])) {
$this->admin->json_response = [
'status' => 'error',
'message' => $this->admin::translate('PLUGIN_ADMIN.INSUFFICIENT_PERMISSIONS_FOR_TASK')
@@ -2142,7 +2142,7 @@ class AdminController extends AdminBaseController
return false;
}
if (!$this->authorizeTask('add media', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('add media', ['admin.pages', 'admin.pages.update', 'admin.super'])) {
$this->admin->json_response = [
'status' => 'error',
'message' => $this->admin::translate('PLUGIN_ADMIN.INSUFFICIENT_PERMISSIONS_FOR_TASK')
@@ -2392,7 +2392,7 @@ class AdminController extends AdminBaseController
return false;
}
if (!$this->authorizeTask('delete media', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('delete media', ['admin.pages', 'admin.pages.update', 'admin.super'])) {
$this->admin->json_response = [
'status' => 'error',
'message' => $this->admin::translate('PLUGIN_ADMIN.INSUFFICIENT_PERMISSIONS_FOR_TASK')
@@ -2979,7 +2979,7 @@ class AdminController extends AdminBaseController
*/
protected function taskConvertUrls()
{
if (!$this->authorizeTask('access page', ['admin.pages', 'admin.super'])) {
if (!$this->authorizeTask('access page', ['admin.pages', 'admin.pages.list', 'admin.super'])) {
$this->admin->json_response = [
'status' => 'error',
'message' => $this->admin::translate('PLUGIN_ADMIN.INSUFFICIENT_PERMISSIONS_FOR_TASK')